Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C471EFE8835311F0897572F4DAE4EC9C.roa
File: C471EFE8835311F0897572F4DAE4EC9C.roa (raw, json)
Hash identifier: 1ES3waNETtPKDqEMP6Do26Q3TRw6TV953FZ0mBrQY3o=
Subject key identifier: CE:89:D4:42:F2:D7:88:05:20:B7:D5:BD:C1:83:F2:5A:86:4B:32:A0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0171CD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C471EFE8835311F0897572F4DAE4EC9C.roa
Signing time: Wed 27 Aug 2025 14:40:25 +0000
ROA not before: Wed 27 Aug 2025 14:40:20 +0000
ROA not after: Fri 10 Oct 2025 14:40:20 +0000
asID: 63139
IP address blocks: 45.197.67.0/24 maxlen: 24
45.197.68.0/23 maxlen: 24
45.197.68.0/24 maxlen: 24
45.197.69.0/24 maxlen: 24
45.197.70.0/24 maxlen: 24
45.197.71.0/24 maxlen: 24
45.197.72.0/24 maxlen: 24
45.197.73.0/24 maxlen: 24
45.197.74.0/24 maxlen: 24
45.197.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94669 (0x171cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 27 14:40:20 2025 GMT
Not After : Oct 10 14:40:20 2025 GMT
Subject: CN=68af18d9-6a09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f0:75:f1:c3:2d:74:76:48:6e:28:90:88:91:
0d:2e:3b:9b:8e:3b:b1:b6:37:a5:74:e6:0f:ac:3a:
43:cf:f5:82:45:9a:3b:69:6b:fe:48:df:41:f0:a3:
c6:a9:21:47:45:37:70:ac:54:28:a0:fc:85:c3:a4:
66:76:e4:a9:3f:fe:56:e1:f4:bf:f5:a8:09:c4:74:
44:70:6f:65:05:6b:02:d4:5f:72:a3:23:32:08:f2:
cb:c7:b1:57:8d:ad:ee:52:fe:73:e9:fd:17:20:91:
3a:19:5f:9a:3c:d1:d3:05:7f:7a:bb:14:16:70:d6:
af:15:6e:f4:c6:c6:a9:ce:ff:a2:ac:bf:82:60:50:
1b:5b:20:3c:1f:18:24:a0:70:d1:b6:1e:bb:1b:5c:
16:a9:82:72:e0:b0:f4:18:91:d8:d9:60:ec:12:28:
f6:2b:94:db:46:88:1d:fc:e8:04:c3:92:64:4c:9b:
9c:41:ff:a6:8b:2e:7d:dc:4b:ee:bb:9f:f8:20:c8:
f9:1a:d4:2f:dc:d2:cc:4b:2a:7d:6c:d9:5a:f3:96:
ef:99:48:ae:fe:f9:45:e8:8c:71:ab:0f:83:a6:e7:
4c:d5:6d:43:08:fb:0c:c6:91:2b:5f:65:75:3c:40:
4a:f5:7b:e4:94:fe:0b:b0:57:a1:e8:a3:1f:d3:19:
fc:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:89:D4:42:F2:D7:88:05:20:B7:D5:BD:C1:83:F2:5A:86:4B:32:A0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C471EFE8835311F0897572F4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.67.0-45.197.75.255
Signature Algorithm: sha256WithRSAEncryption
7e:73:45:e7:2c:8a:de:23:9c:82:2e:0b:c3:b8:12:58:26:aa:
07:05:bb:5a:1d:60:fc:95:9e:6f:1a:7b:f2:ff:73:17:07:7c:
38:0d:cc:9d:71:35:24:58:c1:85:3d:b8:aa:9f:a3:8c:58:39:
10:cd:7f:b7:e7:83:3b:9e:67:ac:66:f9:8b:33:e8:30:33:dd:
03:2b:f2:96:a5:a4:74:b1:e0:4a:29:f5:4f:fa:2d:7c:39:61:
69:19:04:cb:71:e9:f5:9c:45:d9:d0:1d:8b:71:9c:8c:1d:af:
53:d0:cd:78:d6:86:bd:4b:8c:5a:b3:bb:1e:82:09:0d:23:5a:
ff:9b:79:d5:7f:48:12:f5:ac:44:cb:3c:de:56:d0:ec:61:29:
68:6a:e1:86:bf:13:e2:9f:b3:b0:83:49:52:85:c3:fc:d1:89:
9d:d4:23:c2:3a:36:52:01:46:2e:d3:c1:f5:9b:0f:9f:9c:59:
f5:ba:13:26:e0:e7:7c:6e:7c:d0:55:59:3a:ca:3c:cc:c2:6a:
c7:37:49:0b:44:a0:36:fd:c5:63:7f:f4:9f:65:53:98:c4:4d:
4b:69:eb:76:25:22:c0:be:a9:8d:a8:cc:a4:79:8a:c3:00:fb:
28:af:30:0e:50:90:00:78:a8:3f:9d:97:5d:12:c2:96:5a:6b:
7b:49:cc:00
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgIDAXHNMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwODI3MTQ0MDIwWhcNMjUxMDEwMTQ0MDIwWjAYMRYw
FAYDVQQDEw02OGFmMThkOS02YTA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtPB18cMtdHZIbiiQiJENLjubjjuxtjeldOYPrDpDz/WCRZo7aWv+SN9B
8KPGqSFHRTdwrFQooPyFw6RmduSpP/5W4fS/9agJxHREcG9lBWsC1F9yoyMyCPLL
x7FXja3uUv5z6f0XIJE6GV+aPNHTBX96uxQWcNavFW70xsapzv+irL+CYFAbWyA8
HxgkoHDRth67G1wWqYJy4LD0GJHY2WDsEij2K5TbRogd/OgEw5JkTJucQf+miy59
3Evuu5/4IMj5GtQv3NLMSyp9bNla85bvmUiu/vlF6Ixxqw+DpudM1W1DCPsMxpEr
X2V1PEBK9XvklP4LsFeh6KMf0xn8CwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFM6J
1ELy14gFILfVvcGD8lqGSzKgMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9DNDcxRUZFODgzNTMxMUYwODk3NTcyRjREQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAAtxUMDBAItxUgwDQYJKoZI
hvcNAQELBQADggEBAH5zRecsit4jnIIuC8O4ElgmqgcFu1odYPyVnm8ae/L/cxcH
fDgNzJ1xNSRYwYU9uKqfo4xYORDNf7fngzueZ6xm+Ysz6DAz3QMr8palpHSx4Eop
9U/6LXw5YWkZBMtx6fWcRdnQHYtxnIwdr1PQzXjWhr1LjFqzux6CCQ0jWv+bedV/
SBL1rETLPN5W0OxhKWhq4Ya/E+Kfs7CDSVKFw/zRiZ3UI8I6NlIBRi7TwfWbD5+c
WfW6Eybg53xufNBVWTrKPMzCasc3SQtEoDb9xWN/9J9lU5jETUtp63YlIsC+qY2o
zKR5isMA+yivMA5QkAB4qD+dl10SwpZaa3tJzAA=
-----END CERTIFICATE-----
Generated at Wed Sep 3 20:14:16 2025 by rpki-client